From 5890c5c9cb793137d54e84d6251ff54ad8bc62dc Mon Sep 17 00:00:00 2001 From: Alex Schapiro Date: Wed, 21 Oct 2026 14:04:00 +0000 Subject: [PATCH] build(deps): cap litellm below 1.107 and constrain the CI smoke install to uv.lock --- .github/workflows/ci-package.yml | 4 +++- README.md | 3 +++ pyproject.toml | 4 +++- uv.lock | 2 +- 4 files changed, 10 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci-package.yml b/.github/workflows/ci-package.yml index 6673d7a06..1fc300834 100644 --- a/.github/workflows/ci-package.yml +++ b/.github/workflows/ci-package.yml @@ -33,7 +33,9 @@ jobs: - name: Install into a clean environment and run the CLI run: | uv venv --python 3.12 /tmp/strix-smoke - uv pip install --python /tmp/strix-smoke/bin/python dist/*.whl + uv export --frozen --no-hashes --no-emit-project --no-dev -o /tmp/strix-smoke-constraints.txt + uv pip install --python /tmp/strix-smoke/bin/python \ + --constraint /tmp/strix-smoke-constraints.txt dist/*.whl /tmp/strix-smoke/bin/strix --version /tmp/strix-smoke/bin/strix --help >/dev/null - name: Vertex AI and Bedrock dependencies install with the wheel diff --git a/README.md b/README.md index 5134c8bd1..3b737da27 100644 --- a/README.md +++ b/README.md @@ -106,6 +106,9 @@ curl -sSL https://strix.ai/install | bash Installed with pipx, uv, or pip? `strix --update` prints the matching upgrade command instead (`pipx upgrade strix-agent`, `uv tool upgrade strix-agent`, `pip install --upgrade strix-agent`). Strix also shows a notice with the right command when a new version is available. +> [!WARNING] +> `litellm==1.107.0` on PyPI (2026-10-21, ~11:40–13:20 UTC) contained a credential stealer ([BerriAI/litellm#47826](https://github.com/BerriAI/litellm/issues/47826)). If you installed or upgraded `strix-agent` with pip, pipx, or uv in that window, check `site-packages` for `cook.pth` and follow the remediation in that issue. The standalone binary from `strix.ai/install` was never affected. + --- ## Ways to Run Strix diff --git a/pyproject.toml b/pyproject.toml index 20519dac1..c948ecd5d 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -35,7 +35,9 @@ classifiers = [ dependencies = [ "openai-agents[litellm]>=0.19.0,<0.20", "openai>=2.45.0,<3", - "litellm>=1.101.0", + # Upper bound is deliberate: litellm 1.107.0 (2026-10-21) shipped a credential + # stealer from a compromised build. Bump only after reviewing the release. + "litellm>=1.101.0,<1.107", "google-auth>=2.0.0", "boto3>=1.28.0", "pydantic>=2.11.3", diff --git a/uv.lock b/uv.lock index ca20930d7..7e470be56 100644 --- a/uv.lock +++ b/uv.lock @@ -2429,7 +2429,7 @@ requires-dist = [ { name = "cvss", specifier = ">=3.2" }, { name = "docker", specifier = ">=7.1.0" }, { name = "google-auth", specifier = ">=2.0.0" }, - { name = "litellm", specifier = ">=1.101.0" }, + { name = "litellm", specifier = ">=1.101.0,<1.107" }, { name = "markdown-it-py", specifier = ">=3.0.0" }, { name = "openai", specifier = ">=2.45.0,<3" }, { name = "openai-agents", extras = ["litellm"], specifier = ">=0.19.0,<0.20" },